SC-300 Certification Practice Question #46

Question

Your network contains an on-premises Active Directory Domain Services (AD DS) domain that syncs with Azure AD and contains the users shown in the following table.

In Azure AD Connect, Domain/OU Filtering is configured as shown in the following exhibit.

Azure AD Connect is configured as shown in the following exhibit.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Accepted Answer

The two unambiguous rows are anchored by MS Learn. Row 2 is Yes because the Ready-to-configure exhibit explicitly enables Pass-through Authentication, which validates passwords against the on-premises domain controller. Row 3 is No because User2 sits in OU2, which is unchecked in Domain/OU Filtering (only OU1 and the default Users OU are selected), so User2 never syncs to Entra ID and therefore cannot be a member (only an invited guest). Row 1 is the contested one: the 38-vote top comment says Yes assuming SSPR is on by default, but MS Learn is clear that SSPR must be explicitly set to Selected/All and requires a P1 license — neither is shown in the exhibits, and password writeback alone does not enable SSPR. The larger and better-reasoned community camp (Another_one 16 👍, AcTiVeGrEnAdE, Kali13, Frank9020) lands on No for Row 1, giving No/Yes/No. Confidence is held at 78% because of the genuine split on Row 1 (38-vote Yes vs. 16-vote No) that hinges on whether default settings are assumed; MS Learn favors No.

More SC-300 practice questions